News
What IT leaders are reading, from the sources they trust, plus articles written for this site. Stories from other sites open in a new tab.
-
Chatbots Are Not Your Friends (opens NY Times in a new tab)
Our cozy relationship with A.I. chatbots can lead to “artificial intimacy,” says one expert. Here’s how to keep it in check.
-
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment (opens Dark Reading in a new tab)
When autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failures we've seen for decades.
-
What We Missed: Google Gemini Joins the AI Escape Party (opens Dark Reading in a new tab)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.
-
AI tools help hacker break in for $25 per target (opens CSO Online in a new tab)
It’s cheap to set yourself up as a hacker these days using AI. Someone attacked 105 online retailers over a period of five days, compromising 27 of them — all for an average of $25 per attack, according to research by Israeli security company Gambit. But the attacks have been going on for much...
-
Documentation placeholder domain used in ClickFix attacks (opens CSO Online in a new tab)
The domain name third-party[.]com is being used to serve malware to users — bad news for those following a little too literally online documentation that uses it as a placeholder for any third-party domain. The site is serving a ClickFix lure to Windows machines, which sidesteps existing protection...
-
GitLab issue email’s only security is obscurity (opens CSO Online in a new tab)
It was meant to make life simpler: a secret email address to which developers can send a message and create an issue in their GitLab project. But poor security defaults and a long-lived token embedded in the address mean that anyone who knows the address can potentially modify protected...
-
Is China Really Stealing A.I. From American Companies? (opens NY Times in a new tab)
As Xi Jinping visits President Trump in Washington, the leaders are expected to discuss claims that China is surreptitiously copying American A.I. technologies, a process known as distillation.
-
Why Is Trust in the Workplace a Leadership Imperative? (opens CTO Magazine in a new tab)
Trust in the Workplace Shapes How People Work, Lead, and Grow In the modern workplace, one thread that runs through every interaction, decision, and outcome is: Trust. It’s the silent force that elevates a group of individuals into a cohesive, high-performing team. Without it, even the most...
-
Stopping IT Worker Scams Requires Revamped HR Process (opens Dark Reading in a new tab)
Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.
-
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware (opens The Hacker News in a new tab)
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below - actions-cool/issues-helper...
-
Open Channels FM: Your Website Could Use a Changelog to Fuel Creativity (opens CTO Magazine in a new tab)
A website changelog helps creators document progress, celebrate small wins, showcase evolution, fuel creativity, and build audience trust. It can include updates, humor, and various formats, making it accessible for all. The post Open Channels FM: Your Website Could Use a Changelog to Fuel...
-
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk (opens Infosecurity Magazine in a new tab)
The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration
-
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence (opens The Hacker News in a new tab)
Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify...
-
Anthropic teams up with Akamai in $11.6bn cloud partnership (opens IT Pro in a new tab)
The expanded deal will help Anthropic meet “accelerating CPU workload demands”
-
CISA Unveils Election Security Plan Ahead of 2026 Midterms (opens Infosecurity Magazine in a new tab)
The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines
-
Open Channels FM: Is It Time to Move On? Navigating Change and Letting Go in Fast-Paced Times (opens CTO Magazine in a new tab)
A reflection on recognizing the right time to move on from creative projects and handling self-doubt. The post Open Channels FM: Is It Time to Move On? Navigating Change and Letting Go in Fast-Paced Times appeared first on CTO Magazine.
-
OpenStation Blog: “I can’t imagine using WordPress any other way”: the love behind OpenStation (opens CTO Magazine in a new tab)
OPENSTATION · COMMUNITY VOICES Formerly Desktop Mode, now a new way to feel at home in wp-admin. A plugin can accumulate installs. It is rarer for people to describe it as a new way of thinking. As of September 25, 2026, OpenStation, known in its earliest releases as Desktop Mode, has inspired 23...
-
The SOC Doesn't Need to Start Over with Every Alert (opens The Hacker News in a new tab)
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at...
-
The Ezra Klein Show: Jensen Huang Thinks A.I. Alarmism Has Gone Too Far (opens NY Times in a new tab)
Ezra Klein interviews the Nvidia chief executive Jensen Huang.
-
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise (opens The Hacker News in a new tab)
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. "At 18:31 UTC on September 24, 2026, Bitget's security systems identified unauthorized transfers involving a limited number of hot wallets," Bitget said in a post...
